$ rpki-client -vvf rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/FFC2CBFCF2DA11F09E4464B23F6F56BC.roa File: FFC2CBFCF2DA11F09E4464B23F6F56BC.roa (raw, json) Hash identifier: bhE8kPKbDhbjGGtK3dqK/PTW2f7OgPh1zprjpQ4GT6Q= Subject key identifier: F4:71:B2:3E:EB:B1:AA:F4:E8:41:2E:E3:7A:F8:1E:47:50:B7:20:07 Certificate issuer: /CN=A916B4A3/serialNumber=FE49C2CF7EF7BCFB44424583DF44A47332082C59 Certificate serial: 06D1 Authority key identifier: FE:49:C2:CF:7E:F7:BC:FB:44:42:45:83:DF:44:A4:73:32:08:2C:59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/FFC2CBFCF2DA11F09E4464B23F6F56BC.roa Signing time: Mon 02 Mar 2026 13:31:50 +0000 ROA not before: Fri 16 Jan 2026 12:58:06 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 154321 IP address blocks: 103.117.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.crl rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 13:31:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1745 (0x6d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B4A3, serialNumber=FE49C2CF7EF7BCFB44424583DF44A47332082C59 Validity Not Before: Jan 16 12:58:06 2026 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a59146-a9ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:49:2e:38:d2:33:75:ad:03:06:91:2f:a4:e6: 75:6b:8f:48:2c:07:3b:df:29:a9:cd:a8:e1:36:53: 3f:7e:f6:1b:3e:43:33:45:67:c9:1c:6b:90:03:6d: af:8b:68:30:ae:4d:2d:bc:f5:e2:87:a5:e4:e1:96: bd:95:0b:5e:58:f2:61:d5:ee:0c:f3:48:7b:5c:07: 99:d5:58:e2:b9:76:90:2c:df:27:24:ba:3a:d9:77: 78:05:f7:f3:13:87:7e:4f:a9:be:62:11:0f:b6:0f: 1c:a9:53:20:9f:3c:28:b7:fd:57:cb:99:ae:3e:e1: b8:3f:c8:3e:d2:2d:86:d0:0b:d7:64:7c:b9:48:cd: 52:e2:31:e5:fc:a7:1b:d0:23:ae:27:80:50:e3:7c: 6b:dd:c1:77:07:10:ab:4e:c8:f0:f2:04:dc:ce:0c: 1f:6b:df:dd:b4:de:b4:73:b3:19:05:8c:56:96:b1: 0c:ee:b4:6c:c8:72:25:5f:d4:c5:5f:56:cb:e0:45: c2:ab:b4:0c:99:24:e6:1a:15:69:32:c7:2b:82:00: 20:ca:ec:24:ca:df:c8:f8:07:46:bc:b0:28:b7:ca: bd:9e:02:ef:1b:b3:4a:4d:cf:e6:f3:f6:57:9a:68: 37:27:40:70:70:d5:85:0c:49:78:6f:37:50:d4:8c: 35:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:71:B2:3E:EB:B1:AA:F4:E8:41:2E:E3:7A:F8:1E:47:50:B7:20:07 X509v3 Authority Key Identifier: keyid:FE:49:C2:CF:7E:F7:BC:FB:44:42:45:83:DF:44:A4:73:32:08:2C:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/FFC2CBFCF2DA11F09E4464B23F6F56BC.roa sbgp-ipAddrBlock: critical IPv4: 103.117.120.0/22 Signature Algorithm: sha256WithRSAEncryption 18:63:a9:ba:53:9f:b1:1e:ef:ff:fa:ae:bc:de:38:16:54:6b: 3c:12:d8:dd:ba:84:81:7d:18:a6:fd:0b:2c:66:09:a5:15:f1: 85:f0:d6:db:68:f4:ee:c1:15:11:1d:21:33:b0:17:5d:68:45: e8:79:73:c5:be:ba:6b:62:0c:16:55:44:03:72:95:dc:39:fc: ed:4b:9a:70:10:c3:93:07:1b:41:31:70:89:1a:fb:27:25:d8: e8:4e:4f:d3:00:cf:d1:3a:0e:4d:30:c4:7a:e0:a0:b6:cf:b6: 0e:7b:ab:2a:58:64:e8:6e:1a:df:fa:7c:75:62:db:04:52:f3: 2a:67:1e:96:85:7b:eb:7a:b7:3a:3b:4c:9e:4e:e6:e8:97:ab: 27:42:a8:1b:aa:b5:69:b3:80:6c:fb:83:5b:dc:a4:72:19:93: 97:5d:43:12:69:39:5b:71:bc:fa:5a:8c:8c:92:7b:d5:04:83: 91:f6:2e:95:8a:40:f8:5e:3e:ef:06:8f:09:0c:ff:5e:51:a4: ed:42:4c:b6:59:58:59:63:87:1f:10:a4:74:da:3f:d2:2f:f5: 5b:7b:1c:82:5d:13:d8:59:a7:e2:b1:92:12:f1:b0:cd:bb:69: 41:86:10:07:b1:91:f9:9c:57:6b:34:f6:5d:e2:74:9a:7e:06: 9d:cd:dd:8b -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBtEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI0QTMxMTAvBgNVBAUTKEZFNDlDMkNGN0VGN0JDRkI0NDQyNDU4M0RGNDRBNDcz MzIwODJDNTkwHhcNMjYwMTE2MTI1ODA2WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OTE0Ni1hOWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA70kuONIzda0DBpEvpOZ1a49ILAc73ympzajhNlM/fvYbPkMzRWfJHGuQA22v i2gwrk0tvPXih6Xk4Za9lQteWPJh1e4M80h7XAeZ1VjiuXaQLN8nJLo62Xd4Bffz E4d+T6m+YhEPtg8cqVMgnzwot/1Xy5muPuG4P8g+0i2G0AvXZHy5SM1S4jHl/Kcb 0COuJ4BQ43xr3cF3BxCrTsjw8gTczgwfa9/dtN60c7MZBYxWlrEM7rRsyHIlX9TF X1bL4EXCq7QMmSTmGhVpMscrggAgyuwkyt/I+AdGvLAot8q9ngLvG7NKTc/m8/ZX mmg3J0BwcNWFDEl4bzdQ1Iw1XwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPRxsj7r sar06EEu43r4HkdQtyAHMB8GA1UdIwQYMBaAFP5Jws9+97z7REJFg99EpHMyCCxZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjRBMy82RDYyQzhDNEEw NDIxMUVCODFCRkZEMUZDNEY5QUUwMi9fa25DejM3M3ZQdEVRa1dEMzBTa2N6SUlM RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19rbkN6MzczdlB0RVFrV0QzMFNrY3pJSUxGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkI0QTMvNkQ2MkM4QzRBMDQyMTFFQjgxQkZGRDFGQzRGOUFFMDIvRkZDMkNCRkNG MkRBMTFGMDlFNDQ2NEIyM0Y2RjU2QkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ3V4MA0GCSqGSIb3DQEBCwUAA4IBAQAYY6m6U5+xHu//+q683jgW VGs8EtjduoSBfRim/QssZgmlFfGF8NbbaPTuwRURHSEzsBddaEXoeXPFvrprYgwW VUQDcpXcOfztS5pwEMOTBxtBMXCJGvsnJdjoTk/TAM/ROg5NMMR64KC2z7YOe6sq WGTobhrf+nx1YtsEUvMqZx6WhXvrerc6O0yeTubol6snQqgbqrVps4Bs+4Nb3KRy GZOXXUMSaTlbcbz6WoyMknvVBIOR9i6VikD4Xj7vBo8JDP9eUaTtQky2WVhZY4cf EKR02j/SL/VbexyCXRPYWafisZIS8bDNu2lBhhAHsZH5nFdrNPZd4nSafgadzd2L -----END CERTIFICATE-----Generated at Mon Mar 2 20:51:49 2026 by rpki-client